Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
File:                     nnld0BGVNBRxXMaHXf05xh5Rgcg.mft (raw, json)
Hash identifier:          wJu4JhI3DUduyQlVY29WUqCzw5bromW2Vuq5UV3aAO0=
Subject key identifier:   A5:2D:14:8B:A4:E1:89:7A:22:9F:3A:51:CA:0C:C1:9E:43:07:16:65
Authority key identifier: 9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
Certificate issuer:       /CN=9e795dd011953414715cc6875dfd39c61e5181c8
Certificate serial:       01A0BE427FC1F1F4537A990CE53EB947412F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
Manifest number:          01C2
Signing time:             Sun 20 Sep 2026 10:00:24 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:24 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:24 +0000
Files and hashes:         1: 0ukpVUSxlWUjEn8_3Xhh5EdLxE4.asa (hash: j4wQB6gt1Z/UKS98HN0+WjuxJxJyXB/YyRal6d7AqSk=)
                          2: 1zwO-pRpLQjpKdc2fMnL99i_j-Y.roa (hash: SYfKKB6gtn0cNSUNi0rlTL24CWOzIm0TRFFugkUSGaY=)
                          3: ZGnoRW5cVvJJj2NLujSWP8-p4ME.roa (hash: SVrmw2kPu3uWDYtUFMQIl+Wr3E0Z77xS+MusJocEbUE=)
                          4: nnld0BGVNBRxXMaHXf05xh5Rgcg.crl (hash: JpM0PJ0pguLuiVuAPJIDYdclwgdQ76h4Ybu3S53GKP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:7f:c1:f1:f4:53:7a:99:0c:e5:3e:b9:47:41:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e795dd011953414715cc6875dfd39c61e5181c8
        Validity
            Not Before: Sep 20 10:00:24 2026 GMT
            Not After : Sep 21 10:00:24 2026 GMT
        Subject: CN=a52d148ba4e1897a229f3a51ca0cc19e43071665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:92:9f:21:37:b6:a9:34:08:9c:ba:ba:ab:
                    5b:ab:ab:ed:66:5d:8b:27:45:a5:d9:08:b2:a9:f4:
                    4b:47:ab:8a:83:e2:2d:3d:3f:c7:3a:cd:8c:4d:09:
                    0d:49:db:9f:06:b8:e4:b9:93:fc:5e:f3:a6:77:b9:
                    e8:ca:35:8a:d6:e6:29:88:a2:ef:b2:64:04:d7:c1:
                    b6:29:d4:a6:b4:a4:28:77:8b:6f:86:56:7f:f9:bf:
                    e4:3b:c9:25:76:86:99:29:a8:89:92:42:bc:7e:22:
                    c5:92:d6:ae:d6:70:df:4e:1f:46:c0:dd:53:5a:aa:
                    7b:8d:9f:f1:e5:6d:69:a3:5b:15:1f:af:04:a4:07:
                    11:ed:f9:87:b7:a1:24:5e:88:ea:43:ee:b0:be:dd:
                    59:14:d7:f3:f5:b2:60:03:8c:3d:f1:11:06:7d:fd:
                    b6:46:17:ef:0e:59:87:6a:38:d0:cf:5c:a0:9b:2d:
                    da:d3:d8:72:ed:ae:8e:1a:cc:6e:05:fa:03:12:60:
                    20:3b:e4:3d:ff:4f:ae:fc:d0:d7:3b:8f:42:09:d6:
                    bf:88:69:ff:9c:3c:f6:14:56:a7:35:6a:93:ee:84:
                    cf:3c:6f:ba:b7:64:a6:8e:fb:d7:40:6f:b6:f4:82:
                    6f:07:34:e6:94:f2:5c:62:8a:04:07:6a:d3:c0:e7:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2D:14:8B:A4:E1:89:7A:22:9F:3A:51:CA:0C:C1:9E:43:07:16:65
            X509v3 Authority Key Identifier:
                keyid:9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:37:6a:5a:b6:a1:a5:03:1e:da:b3:eb:52:87:80:d5:1f:8f:
         9f:c7:70:c7:a8:f3:53:0f:74:3d:a1:2a:d2:0f:4e:c5:71:a5:
         a3:68:09:9f:52:21:72:74:c0:6d:36:21:b5:59:02:c5:6c:3f:
         eb:00:30:47:0e:60:63:17:a3:33:ac:b9:73:a4:f8:27:b9:79:
         54:2d:82:64:ab:66:eb:ac:9d:7f:2d:75:c4:b9:fa:07:41:77:
         a9:a9:ed:91:28:b2:1d:ae:66:d9:14:12:99:5f:e2:cd:09:06:
         3b:3a:d8:41:25:83:a9:20:5d:f1:bd:87:f8:ac:bb:06:99:b7:
         93:43:c8:b9:11:f0:c0:4e:16:b5:e7:be:f8:b7:fd:a4:80:28:
         93:26:fd:a9:16:8b:24:4f:34:a9:1b:cd:ef:70:46:9f:0f:c0:
         1f:ed:2f:cf:8b:1e:2d:9d:e6:3d:aa:52:f2:6a:28:fd:94:58:
         1d:d6:98:ec:7d:fa:0f:d5:0e:62:32:5c:ce:8e:00:34:50:ea:
         31:6c:5e:04:1d:da:96:68:f8:5f:47:c4:13:22:6b:9a:33:10:
         80:27:d6:2c:a4:ee:0a:fa:da:71:a7:c6:14:ca:b9:50:0b:ae:
         6b:65:c7:2e:2a:b9:dc:8d:f0:2c:ab:b7:99:6f:7b:99:57:15:
         17:85:b1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:54:47 2026 by rpki-client